Day 1 - Session IV – Drafting: Drafting the FIC’s intake and request SOPs
Three products:
- Contents/Outline – SOP
- Workflow (detailed)
- Fleshing workflow out into bullet points
- Based on proclamation – what intakes?
- Who are sources? What do we expect from whom?
- How to collect them – means?
- Who does what? Ex: banks, supervisory or other agencies, recipients
- What type of intake? What type of activity for every intake?
- Ex: What type of activities for STR?
- Who does what?
- When reported/received/checked against verifications (completeness)?
- How? – mechanism
- What kind of guidelines to sources and recipients?
2. Workflow
(DC to draw diagrams from TAD)
Is an STR complete? Criteria:
- Branch
- Contact person – signed by branch manager
- Contact Address
- Telephone number
- Fax
- If from head office only, already know compliance officer. Head office reports ST from different branches, then forward to FIC. Final decision of making this STR is from the branch.
- Fields completion – need an auto mechanism to test whether require fields are filled in. System to flag incomplete
- Mandatory fields should have a clear mark (ex: red box for mandatory)
Are all mandatory fields completed?
If incomplete:
- Standard template for correspondence back to sender of STR
- Ex:
- To: Branch
- Address
- Subject: Incomplete STR
- Body: Include check boxes next to fields – check which ones are incomplete
Opinion of reporting entity-the compliance officer (who submitted report)
Occupation of the individual who conducted transaction
If yes, complete STR (in terms of all mandatory fields):
- Goes to Deputy Director General
[*FIC has to receive all STRs and analyze them. FIC does not have the right to completely refuse. Without additional information, FIC files it – This is not a standard procedure.]
When Deputy Director General receives the complete STR, she decides if it is suspicious based on:
- Verification: Substance of indicators of a STR
- Prioritization: Weight of indicators
- The DDG analyzes all STRs.
- If it is an STR, which STR should be prioritized?
- Make first assessment based on risk matrix.
Risk Matrix – Kamlesh to provide copy of matrix with ratings.
[Risk Matrix background. Usually done by computer system such as goAML and can set FATF typology criteria ex: TF typologies. ]
Impact
HH 100% risk
Likelihood
LL
- If low-risk STR, how to handle it?
- Reference/Database: Keep on file as information and never delete transaction reports. “Intelligence never dies”.
- Information-sharing: FIC provides as information to another entity working on related case.
- [FIC mandate – Can automatically request bank to block account for up to three days.]
- Ex: NISS responsibility in relation to terrorist activities. Consult NISS to see if there are related cases - FIC to request additional information from banks to see if they have similar activity as a supplementary report (no analysis).
How would STR go to database? – SOP needed
How to receive, handle validation of and add CTRs to database? What about for cross-border transaction reports? Wire transfer reports? – SOP needed
STR flow: - need to set timeframe– SOP needed
Source
Financial information follow-up
DDG
Analyst
CTR flow:need to set timeframe– SOP needed
Source
Financial information follow up
Examiner/verifier = analyst
Database == sent to analyst
FIC already has:
- Format for STR (see: is an STR complete?)
- Format for CTR
Next steps:
- Software selection and purchase for FIC
- Options:
- Visualink (FINCEN, AMLO use)
- I2
- goAML (Mauritius fully integrating software in Jan. 2014)
- “CLEAR” (TBC – to look up)
- Text Retrieval system (old Mauritius software – “internal google”)
- Show links in terms of cases involved – analyst then extract into I2 chart
- Software criteria
- Mandatory fields
- analysis capacity